Re: AD Container


"naguaramipana" <naguaramipana@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:22A3F0B8-F26D-45BF-8D45-C1E0542EEF99@xxxxxxxxxxxxxxxx
M.

Thanks again.

I will try that revert option, I have never had this problem before with
the setup as it is, I have a OU for all workstation that follow the same
policies and I use and is untouch the computer container for computers on my
domain that have no restriction whatsoever, is this what youa re talking
about. becuase once I move one workstation computer to the computer object
this moved computer takes on its own whatever restriction are on that
container whihc is none.

Thanks again, is just that is strange that with this particular computer the
GOP follows no matter where it goes.

Thanks a bunch


"Meinolf Weber [MVP-DS]" wrote:

Hello naguaramipana,

As Meinolf mentioned earlier, it depends on the GPO setting that was applied to the machine in the Workstation Organizational Unit. Some are tatooted, others stick. So without knowing which settings you are referring to, it will be difficult to ascertain or give you a specific reason. As Meinolf mentioned, the ones that stick, need to be set to defaults or disabled in the GPO, then GPO must be refreshed on the machine.

If you can elaborate on the GPO settings you have placed on the Workstation Organizational Unit, it may help us, or you can simply follow the link that Meinolf provided in his earlier post.

Also, I agree with the keeping the terminology consistent. There are Containers, and there are OUs. An OU is a container, but is is a managed container. We always refer to them as OUs and not containers, for technically, that is what they are. When I first read your original post, it was a little confusing at first, but I understood what you were saying. But just for future reference, OUs and Containers are different animals.

Also, I agree with Meinolf in that I believe you should have a more focused design on your OUs. OUs help with organizing domain objects (users, computers, groups, servers, etc) for a number of reasons from simple organization to Group Poicy Control. You can create an OU with the settings you want, then create another OU parallel to this OU (not under it), with the opposite settings that do not get removed, to revert them in order to take care of what you are trying to accomplish.

Take a look at the following diagram to get a better visual of what I'm referring to, please.

GPO Flow with Sites, Domains and OUs:
http://fekay.com/supportblogs/gpoflow.jpg

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@xxxxxxxxxxxxxxxxxxxxxxx

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.


.

Relevant Pages

  • Re: Group Police Question !
    ... A GPO linked so it will apply to a computer will apply the computer ... and one linked so it will apply to a user will apply the user settings. ... I have one Workstation for All internal ... > his Workstation will apply Group Police ...
    (microsoft.public.windows.server.general)
  • Re: Group Police Question !
    ... A GPO linked so it will apply to a computer will apply the computer ... and one linked so it will apply to a user will apply the user settings. ... I have one Workstation for All internal ... > his Workstation will apply Group Police ...
    (microsoft.public.windows.server.setup)
  • Re: Group Police Question !
    ... A GPO linked so it will apply to a computer will apply the computer ... and one linked so it will apply to a user will apply the user settings. ... I have one Workstation for All internal ... > his Workstation will apply Group Police ...
    (microsoft.public.windows.server.security)
  • Re: AD Container
    ... I have 60 computers on this workstation OU, ... object container and because the reason M explain the machine now has no GPO ... so I can open control panel and wrok from there. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ActiveSync 4.0 Will Not Sync
    ... I am having severe problems with the new ActiveSync 4.0 that shipped ... Various settings on my users' PC are controlled by a GPO with only ... container. ...
    (microsoft.public.pocketpc)
Loading